Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] Are user decodes persisted?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: LEGO <luis.ontanon@xxxxxxxxx>
Date: Fri, 5 Jan 2007 16:53:45 +0100

You can use lua for that...

do
       local tcp_port_table = DissectorTable.get("tcp.port")

       local http_dissector = tcp_port_table:get_dissector(80)

       for port in {4888,4889,4890,4891} do
               tcp_port_table:add(port,http_dissector)
       end
end

On 1/5/07, Douglas Pratley <Douglas.pratley@xxxxxxxxxx> wrote:
Thanks for that.

I might see if there is a sensible way to (optionally) persist them when
I get a moment.

-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Stephen Fisher
Sent: 04 January 2007 19:26
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] Are user decodes persisted?

On Thu, Jan 04, 2007 at 04:50:46PM -0000, Douglas Pratley wrote:

> Does anyone know whether or not "User Decodes" are persisted between
> Wireshark sessions? As far as I can tell they are not. I'm working on
> extending some of the "Decode As" functionality and it actually makes
> my life easier in the short term if I don't have to update persistence

> functionality to be consistent...

The user decodes are not saved between Wireshark sessions.  The closest
you can get to such functionality is with certain dissectors that allow
you to specify an alternate port to decode as (for example HTTP, VNC,
etc.)


Steve

_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev



This message should be regarded as confidential. If you have received this email in error please notify the sender and destroy it immediately.
Statements of intent shall only become binding when confirmed in hard copy by an authorised signatory.  The contents of this email may relate to dealings with other companies within the Detica Group plc group of companies.

Detica Limited is registered in England under No: 1337451.

Registered offices: Surrey Research Park, Guildford, Surrey, GU2 7YP, England.


_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev



--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan

  • References:
    • Re: [Wireshark-dev] Are user decodes persisted?
      • From: Douglas Pratley
  • Prev by Date: Re: [Wireshark-dev] bootp-dhcp vendor-specific options
  • Next by Date: Re: [Wireshark-dev] Are user decodes persisted?
  • Previous by thread: Re: [Wireshark-dev] Are user decodes persisted?
  • Next by thread: Re: [Wireshark-dev] Are user decodes persisted?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation